Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft
File: ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft (raw, json)
Hash identifier: xVsAbtp3MWaXszRTDREjLLZdmK9zvtNaOXTuYWB+CGE=
Subject key identifier: A5:6D:9B:C8:CF:2F:41:12:65:5A:D2:A2:32:86:D3:89:8F:FA:7C:94
Authority key identifier: 64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF
Certificate issuer: /CN=64f873adb6a1f3e81b3343c74998947526c43dcf
Certificate serial: 01987C40A3DF88F97839B80820ACDCC49C55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft
Manifest number: 12B1
Signing time: Tue 05 Aug 2025 22:01:07 +0000
Manifest this update: Tue 05 Aug 2025 22:01:07 +0000
Manifest next update: Wed 06 Aug 2025 22:01:07 +0000
Files and hashes: 1: 47NYg-phdSB9NeK2va9JIKsAb5A.roa (hash: 86ZHiVMTfTtd+skHx8yHsEGyhHphyGuDVxjbPZ3RryU=)
2: 9C2OE_UiXlf9d9G1cIpAZTGa-qE.roa (hash: r/TntNYFZZscNnR6FrYLxeeivbdyseJ1z7nSB0IzeU8=)
3: PBRIpRP-Yi2Zwr1ZnkM_l4qFPgs.roa (hash: ekiRbPByfTM7Fnyz7R+Df6+K5P9KMDqYABA3L68ThWc=)
4: ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl (hash: cSMWdiozCYSBU132s0yyfr2UcFlee4PFvPY/5D6DCHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:a3:df:88:f9:78:39:b8:08:20:ac:dc:c4:9c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64f873adb6a1f3e81b3343c74998947526c43dcf
Validity
Not Before: Aug 5 22:01:07 2025 GMT
Not After : Aug 6 22:01:07 2025 GMT
Subject: CN=a56d9bc8cf2f4112655ad2a23286d3898ffa7c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:27:d0:36:ea:39:49:1c:f9:96:28:4a:23:5d:
e5:f2:30:5e:2b:ec:89:e0:e4:43:8d:ed:20:4a:34:
91:ab:95:73:14:d5:74:46:1a:77:ea:d1:39:41:f7:
20:54:ed:31:05:4d:63:79:d1:20:c8:9d:88:09:b8:
96:8d:c1:db:57:e2:98:36:44:38:df:ad:23:2f:66:
17:de:ef:ea:88:8e:70:b5:a6:6f:ae:2f:56:c3:7d:
be:06:11:70:4a:b6:be:87:9c:78:0e:77:0d:75:ee:
4b:20:f1:fb:75:bb:2c:5d:90:3a:a5:2a:78:62:7e:
12:f7:ed:01:45:d3:5d:e8:e3:13:97:8a:bc:c6:a4:
f8:3e:ff:89:e4:0f:5b:93:6e:0e:75:b4:0c:46:e0:
7b:66:00:8f:27:65:60:60:4f:76:3a:97:9f:9e:ad:
4b:6b:f5:ac:8c:2b:1b:6b:ef:19:0d:bc:1f:71:91:
06:2e:77:59:60:3a:a9:5b:11:22:be:28:e3:70:86:
6f:a2:4d:c9:a6:48:58:fa:d9:cd:fc:35:b7:81:66:
fa:0e:dd:c0:bc:97:b0:25:da:0e:49:a7:4f:c8:1f:
c6:a8:e9:4b:1a:12:bd:93:81:f6:11:27:51:06:06:
00:29:cd:c2:00:86:16:39:e9:c3:f0:45:f6:56:75:
75:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6D:9B:C8:CF:2F:41:12:65:5A:D2:A2:32:86:D3:89:8F:FA:7C:94
X509v3 Authority Key Identifier:
keyid:64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:cc:82:ce:48:60:7c:ae:72:6b:f4:74:2b:ab:3d:4d:12:ec:
b6:00:a4:7f:80:b0:ff:56:07:c0:50:d5:97:83:92:61:bc:7a:
22:67:a0:32:ee:87:a1:3b:10:3d:59:a4:27:5d:15:43:50:4e:
a0:03:18:0e:b6:58:3b:e5:23:2c:8d:57:cc:0a:be:7a:d5:cd:
26:d9:cf:83:db:9e:2c:2d:2e:d1:4f:2d:e2:5f:09:b1:8a:86:
46:7f:6d:b1:62:7f:02:8e:be:71:ab:89:9f:72:4b:ec:d8:79:
76:ab:36:32:b3:7b:90:bc:60:22:95:16:1a:97:8a:1d:7d:e3:
d3:34:4e:d2:eb:56:0f:9c:41:12:9b:4c:21:6c:24:4b:da:a7:
bb:c8:75:14:04:c1:f9:a9:e6:8a:ce:14:a6:b3:bb:97:15:09:
d2:28:25:b8:47:4d:8a:a2:0f:b0:81:9e:ee:7c:a7:dd:55:05:
b6:54:8c:82:05:53:43:90:ed:77:65:08:0a:71:17:83:ef:ea:
a4:18:64:05:94:02:c3:01:b8:9c:12:16:ca:1e:13:5b:66:34:
df:e0:93:1e:d7:f2:de:9a:37:27:d2:40:71:ce:4e:e4:14:bc:
4e:43:51:91:34:0c:a0:67:51:1e:ad:74:9a:cd:d3:f3:36:f4:
b8:d2:d8:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8QKPfiPl4ObgIIKzcxJxVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0Zjg3M2FkYjZhMWYzZTgxYjMzNDNjNzQ5OTg5NDc1MjZj
NDNkY2YwHhcNMjUwODA1MjIwMTA3WhcNMjUwODA2MjIwMTA3WjAzMTEwLwYDVQQD
EyhhNTZkOWJjOGNmMmY0MTEyNjU1YWQyYTIzMjg2ZDM4OThmZmE3Yzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yfQNuo5SRz5lihKI13l8jBeK+yJ
4ORDje0gSjSRq5VzFNV0Rhp36tE5QfcgVO0xBU1jedEgyJ2ICbiWjcHbV+KYNkQ4
360jL2YX3u/qiI5wtaZvri9Ww32+BhFwSra+h5x4DncNde5LIPH7dbssXZA6pSp4
Yn4S9+0BRdNd6OMTl4q8xqT4Pv+J5A9bk24OdbQMRuB7ZgCPJ2VgYE92Opefnq1L
a/WsjCsba+8ZDbwfcZEGLndZYDqpWxEivijjcIZvok3JpkhY+tnN/DW3gWb6Dt3A
vJewJdoOSadPyB/GqOlLGhK9k4H2ESdRBgYAKc3CAIYWOenD8EX2VnV1GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVtm8jPL0ESZVrSojKG04mP+nyUMB8GA1UdIwQY
MBaAFGT4c622ofPoGzNDx0mYlHUmxD3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlBoenJiYWg4LWdiTTBQSFNaaVVkU2JFUGM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9iOWU0YzQtYTNkYy00NmU4LWFhM2Ut
Mzk3ZjM2YzkxOTgyLzEvWlBoenJiYWg4LWdiTTBQSFNaaVVkU2JFUGM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9iOWU0YzQtYTNkYy00NmU4LWFhM2UtMzk3ZjM2YzkxOTgy
LzEvWlBoenJiYWg4LWdiTTBQSFNaaVVkU2JFUGM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApcyCzkhg
fK5ya/R0K6s9TRLstgCkf4Cw/1YHwFDVl4OSYbx6ImegMu6HoTsQPVmkJ10VQ1BO
oAMYDrZYO+UjLI1XzAq+etXNJtnPg9ueLC0u0U8t4l8JsYqGRn9tsWJ/Ao6+cauJ
n3JL7Nh5dqs2MrN7kLxgIpUWGpeKHX3j0zRO0utWD5xBEptMIWwkS9qnu8h1FATB
+anmis4UprO7lxUJ0igluEdNiqIPsIGe7nyn3VUFtlSMggVTQ5Dtd2UICnEXg+/q
pBhkBZQCwwG4nBIWyh4TW2Y03+CTHtfy3po3J9JAcc5O5BS8TkNRkTQMoGdRHq10
ms3T8zb0uNLYCg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:55:27 2025 by rpki-client